1 paper · 1 filter
Owen Friedewald, Srikar Alla, Ali Shiri Sichani +1
Removing an input-scaling module changes both a classifier and the perturbations reaching its encoder. A robustness difference can therefore reflect the comparison rule as well as…